Efficiency, transparency, simplicity: The 3-legged stool of data protection